General
-
Target
9c4e690febdf0c40f8ea25ca7ea34153230e77807aa8b088028004becd44079a
-
Size
264KB
-
Sample
240622-kmtvkasbla
-
MD5
ac1b9dbf2cde29e1d6106b6016866617
-
SHA1
7cf864139dd0675db6fc14c0fb810650c4282f77
-
SHA256
9c4e690febdf0c40f8ea25ca7ea34153230e77807aa8b088028004becd44079a
-
SHA512
19e45af09b3b507c89a4a09cf8f35e87a400ca8357aed6b7301687def9b982f742d4ab69e61217dc8d494422f8bebab5236acc7a25cb0f314c3ad22c5b588e79
-
SSDEEP
3072:m3Uq9xqR0SHtsrltkgtRL2/GyyL66HyapV2rAVtlMr0XvivTk3VInF23MUV:pV0SHCPrcBKcEVHMkK70VUF23M
Static task
static1
Behavioral task
behavioral1
Sample
9c4e690febdf0c40f8ea25ca7ea34153230e77807aa8b088028004becd44079a.exe
Resource
win7-20240611-en
Malware Config
Extracted
gcleaner
185.172.128.90
185.172.128.69
-
url_path
/advdlc.php
Targets
-
-
Target
9c4e690febdf0c40f8ea25ca7ea34153230e77807aa8b088028004becd44079a
-
Size
264KB
-
MD5
ac1b9dbf2cde29e1d6106b6016866617
-
SHA1
7cf864139dd0675db6fc14c0fb810650c4282f77
-
SHA256
9c4e690febdf0c40f8ea25ca7ea34153230e77807aa8b088028004becd44079a
-
SHA512
19e45af09b3b507c89a4a09cf8f35e87a400ca8357aed6b7301687def9b982f742d4ab69e61217dc8d494422f8bebab5236acc7a25cb0f314c3ad22c5b588e79
-
SSDEEP
3072:m3Uq9xqR0SHtsrltkgtRL2/GyyL66HyapV2rAVtlMr0XvivTk3VInF23MUV:pV0SHCPrcBKcEVHMkK70VUF23M
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-